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Abstract. Let n be a positive integer and consider the Diophantine equa- 
tion of generalized Fermat type + y^" = in nonzero coprime integer 
unknowns x, y, z. Using methods of modular forms and Galois representations 
for approaching Diophantine equations, we show that for n £ {5, 31} there are 
no solutions to this equation. Combining this with previously known results, 
this allows a complete description of all solutions to the Diophantine equation 
above for n < 10^. Finally, wc show that there are also no solutions for n = — 1 
(mod 6). 

1. Introduction 

Since the proof of Fermat 's Last Theorem [21], [2P| and the estabhshment of 
the fuU Shimura-Taniyama-Weil conjecture [3], many Diophantine equations were 
solved using a strategy similar to that of the proof of FLT. Amongst them are 
various so-called generalized Fermat equations. These are Diophantine equations 
of the form 

(1) ax^ + by'^ — cz^ , x,?/, zgZ, xyz^O, gcd{x,y,z) = l 

where a,b,c are nonzero integers and p,q,r are integers > 2. The nature of the 
solutions depends very much on the quantity 

111, 
X{Pi<l,r) := - H \ 1. 

p q r 

If xiPjQi''') > Oj then there are either no solutions to ^ or infinitely many. In 
the latter case, there exist finitely many triples {X, Y, Z) of binary forms X,Y, Z ^ 
Q[u,v] satisfying aX^ + bV^ = cZ^ such that every solution {x,y,z) to ^ can be 
obtained by specializing the variables u, v to integers for one of these triples; see [J. 
If xiPi 9) ^) — 0, then the determination of the solutions to ([Ij basically boils down 
to finding rational points on curves of genus one. If xiPi Qi < 0, then there exists 
a curve C of genus > 2 and a covering (/) : C — > P^, both defined over a number 
field K, such that for every solution {x, y, z) to ^ we have [ax^ : cz^] € cf){C{K)). 
Since by Fallings' theorem C{K) is finite, there are only finitely many solutions to 
dJ) in this case; see pijj. 

Of special interest is the generalized Fermat equation with a = 5 = c = l. In 
the case x(p, g, r) > 0, all the (parameterized) solutions are known; see [2] and [11) . 
If x(P: 1i = 0; only solution, up to sign and permutation, is given by the 
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Catalan solution 2"^ + 1^ = 3^. If < 0, the only solutions known, up to 

sign and permutation, are given by 2"^ + f = 3^ {q > 7) and 

17^ + 2^ = 71^ 2213459^ + 14143 = 65^, 

15312283^ + 9262^ = 113^, 76271^ + 17^ = 21063928^; 

1549034^ + 33** ^ 15613^ 96222^ + 43^ = 30042907^; 
132 + 7^ = 2^; 
7^ + 2^ = 3*, 11^ + 3^ = 122^. 
For a list containing many (families of) triples {p, q, r) for which ([T]) has been solved 
in this case, we refer to [iTl Table 1]. In this paper we will focus on the special 
case {p,q,r) — (2,2n, 3) for ri G Z>o, i.e. we are concerned with the Diophantine 
equation 

(2) a;^+?/" = z3, x,y,zeZ, xyz ^ 0, gcd{x,y, z) ^ 1. 

Previously known results. For n — 1,2 we have x(2,2n, 3) > 0, and in both cases 
there are infinitely many solutions to ([2]). By factoring + j/^ = over the 
Gaussian integers as (a; + iy){x — iy) = z^ one readily gets, that a solution to ^ 
for n = 1 satisfies 

(x, y, z) = {u{u^ — 3w^), v{3u^ — w^), + w^) 

for some u, u e Z with gcd(u, v) = 1 and uv 7^ 0. By demanding that v{3u^ — v^) 
is a square, one can obtain parameterized solutions to ([2]) for n — 2. This was 
carried out by Zagier and reported in [51; up to sign there are 4 parameterizations, 
3 of which have coefficients in Z. In [11 parameterized solutions to © for n = 2 
were obtained by a different method, the same parameterizations as in [2] were 
found, except that the one with non-integer coefficients was replaced by one with 
coefficients in Z. 

For 71 = 3 there arc no solutions to ([2]). This follows readily from the well-known 
fact that the only rational points on the elliptic curve given by = — 1 are 
(X, F) = (1, 0) and the point at infinity. 

By demanding that y is a square for the parameterized solutions to ([2]) for n = 2, 
one obtains genus 2 curves such that every solution to ^ for n = 4 corresponds to 
a rational point on one of these curves. This, together with the determination of 
all rational points on these curves using effective Chabauty methods, was carried 
out in [4]. The result is that, up to sign, the only solution to ([2]) for n = 4 is given 
by 15490342 + 33® = 15613^. 

We see that it suffices to deal with n a prime > 3. In [7], the equation is 
studied using methods of modular forms and Galois representations for approaching 
Diophantine equations. In particular, an explicit criterion is given for showing that 
^ has no solution for a given prime n > 7. This criterion is verified for all primes 
7 < n < 10^ except n = 31, thereby showing that ([2]) has no solutions for these 
values of n. The nonexistence of solutions for n = 7 follows from the work of [17j . 
so the only small values of n left to deal with are n = 5, 31. 

At this point we should mention that, for m e Z>i, the Diophantine equation 

x^ -\- y^ = z™, x,y,z £ Z, xyz ^ 0, gcd(a;, y,z) — 1 

is much harder to deal with than ([2]) is (apart from some small values of to), even if 
we just consider even to. This is because of the Catalan solution 3^ + (—2)'^ — 1™. 
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For m < 5 there are infinitely many solutions. The parameterization for m = 2 
is again very easy to obtain, for m — 3, 4, 5 we refer to (to — 3 was earlier 
done by Mordell and to = 4 by Zagier). The case m = 6 is classical, it amounts to 
determining the rational points on the elliptic curve given by = + 1. The 
cases TO = 7, 8, 9, 10 are solved in [17], [1], [6], [19] respectively. 

New results. In this paper, we will extend the criterion mentioned above to all 
primes n > 3 and use it to show that there are no solutions for n = 5. This is 
basically done by showing that a Frey curve associated to a (hypothetical) solution 
has irreducible mod-rt representation for n — 5,7. By using extra local information 
obtained from classical algebraic number theory, we obtain a refined criterion, which 
is used to show that ([2]) has no solutions for n = 31. So from a Diophantine point 
of view our main result is the following. 

Theorem 1. //ne{5,31}, then has no solutions. 

Although we focus on very specific equations, we feel that the methods we use 
to overcome the earlier difficulties, could definitely be used in other cases as well. 
Combining our main result with the previously known results mentioned above, we 
arrive at a description of all solutions for n < 10^. 

Corollary 2. Let n E Z>o with n < 10^. If n E {1,2,4}, then (0j has solutions, 
all of which are described above. If n ^ {1,2,4}, then (0j has no solutions. 

Finally, by applying a key idea from [8J , we solve ^ for infinitely many (prime) 
values of n. 

Theorem 3. If n E Z>o with n = —1 (mod 6), then (0) has no solutions. 

2. A MODULAR APPROACH TO + J/^' = 

Throughout this section, let I denote a prime > 3. We shall explain how modular 
forms and Galois representations can be used to study ([2]) for n — I. We want to 
stress that the methods and results described in this section are not new and can 
be found essentially in [7] . For a general introduction to using methods of modular 
forms and Galois representations for approaching Diophantine equations, one could 
consult e.g. Chapter 2 of the author's Ph.D. thesis [3]. 

Lemma 4. Suppose that {x,y, z) is a solution to (0j for n = I. Then 

(3) [x, y\z) = (u(u2 - 3i;2), w(3u2 - v^),u'^ + v^) 

for some m,w G Z with gcd(u, t;) = 1, uv ^ 0, 3|w and 2\uv. Furthermore, 

(4) 3^; r' and 3^^ - = 3s' 
for some s G Z with gcd(r, s) = 1 and rs ^ 0. 

Proof. That ([3]) holds for some nonzero coprime integers u, v follows immediately 
from the parameterization of solutions to ([2]) for n — \, given in Section [TJ From 
v(2>u^ — f^) = we see that up to primes dividing gcd(D,3u^ — v^), both v and 
3w^ — must be Z-th powers. One easily checks that gcd(w, 3u^ — v^) equals either 
1 or 3. 

First suppose that gcd(z;,3u^ — u^) = 1. Then v = r^ and 3u^ — = s' 
for some nonzero r, s G Z. Furthermore, r, s and u are pairwise coprime and 
(r^)' + s' — 3u^. However, [H Theorem 1.1] tells us that for an integer n > 3 there 
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arc no nonzero (pairwise) coprime integers a,b,c satisfying a" + 6" = 3c^, which 
contradicts gcd{v, 3u^ — v^) ~ 1. So suppose now that gcd(w, — v^) — 3. Then 
3|u and of course 3 f w, so 3||3u'^ — w^. We get that 3u = r' and — = 3s' for 
some nonzero r, s G Z. Finally, if both u, v are odd, then v{3u^ — u^) = 2 (mod 4), 
but this contradicts that v{3u^ — tj^) is an ^-th power. □ 

We have reduced 1^ ioi n — I to the equation v{3u^ — w^) = y' with u,v,y as 
in the lemma above. This equation can be approached using methods of modular 
forms and Galois representations. In fact, one can use almost exactly the same 
methods as used in 12J for studying the equation a'^ + — c' in nonzero coprime 
integers a, &, c. 

Suppose {x,y, z) is a solution to ^ for n — I, let w, w, r, s be as in Lemma U and 
consider the following Frey curve associated to this solution 

, . ^ _y2 _[ + 2uX2 + -^X if u is even; 

^ I X3 ± + f^X, ±u EE 1 (mod 4) if u is odd. 

Because 3\v and 2\v \i u is odd, we see that the model for E above actually has 
coefficients in Z. Using Tate's algorithm, or the in practice very handy to use jl6j . 
one finds that the model for E is minimal at every prime p, except at p = 2 when u 
is odd. Furthermore, the conductor N and the minimal discriminant A of i? satisfy 
(see also [3 Propositio 8] and [U Lemma 2.1]) 



u 



A =2" • 3-=^w'*(3u2 - = 2" • 3"^ (rS) , a := 6 if 2|w, a:=-12if2t 

7V=2^-3rad{2,3}(A) = 2'^-3rad{2,3}(rs), /3 := 5 if 2|u, /3:=lif2|w, 

where for a finite set of primes 5* and a nonzero rt G Z, rad5(n) denotes the product 
of prime p with p\n and p ^ S. 

Remark 5. From x"^ — = — y^', an obvious choice, up to quadratic twist, for a 
Frey curve associated to the solution {x, y, z) would be 

E' -.Y"^ ^X^ - izX + 2x. 

This model has (not necessarily minimal) discriminant —2^ • 3^(x^ — z^) — 2^ • 3^?/^', 
which has no primes > 3 in common with C4 = 2^ • 3^z. Using fS]), we can write E' 
as 

E' -.Y^ ^ X^ ~ 3(^2 + v^)X + 2u{u^ - 3^2), 

from which we obtain that E' has a rational 2-torsion point because the right-hand 
side factors as {X + 2u){X'^ — 2uX + — 3v'^). The 2-isogenous elliptic curve 
associates to the 2-torsion point {X, Y) = {—2u, 0) is simply, up to quadratic twist, 
the Frey curve E above. For both theory and practical computation, it makes 
no difference whether E or E' is used, except for establishing irreducibility of the 
mod-5 representation, where the computations actually become cleaner if one uses 
E' instead of E. The only reason for introducing E above, is to follow [7 more 
closely. 

For an elliptic curve £ over Q, let pf : Gal(Q/Q) Gl2(Fi) denote the standard 
2-dimensional mod-^ Galois representation associated to <B (induced by the natural 
action of Gal(Q/Q) on the Z-torsion points E[l] of £). Suppose that pf is irreducible. 
Then by modularity |3J and level lowering 18 (note that pf is finite at I), we obtain 
that pf is modular of level No := 2^ ■ 3, weight 2 and trivial character. This means 
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that pf ~ PI for some (normalized) newform / e S'^(ro(Afo)), where of com'se pi 
denotes the standard 2-dimensional mod-Z Galois representation associated to /. 
If u is odd, then Nq = 6 and since there are no newforms in S'^(ro(6)) we have 
reached a contradiction in this case. If u is even, then A'o = 96 and S'^(ro(96)) 
contains 2 newforms, both rational and quadratic twists over of each other. 
So pf pI ~ pf° for some elliptic curve Eq over Q with conductor A'^o = 96. As 
is well-known, we get from pf ~ Pi° by comparing traces of Frobenius, that for 
primes p 

ap{Eo) = ap{E) (mod/) iip\N 
apiEo) = ap{E){l + p) = ±{l + p) (modi) if p\N and p \ Nq ^ 2^ ■ 3. 
Note that we explicitly know Eq up to isogeny and quadratic twist. So if Eq is 
any elliptic curve over Q with conductor 96, e.g. given by — ± X^ — 2X, 
then ap{EQ)'^ = ap{EQ)'^ for all primes p. Therefore, for every prime p, we can 
effectively compute the uniquely determined value ap{EQY . We summarize some 
of the Diophantine information obtained so far. 

Lemma 6. Suppose that {x,y,z) is a solution to 0j for n ~ I, let u,v be as in 
Lemma^ let the elliptic curve E he given by (B^, let Eq be any elliptic curve over Q 
with conductor 96 and let p > 3 be prime. If pf is irreducible and ap(-Bo)^ ^ 
(mod Z), then p] v{3u'^ — v"^) and ap{Eo)'^ = ap{Ey (mod Z). 

We see that in order to obtain a contradiction and conclude that ([2]) has no 
solutions for n = Z, it suffices (still assuming the irreducibility of pf) to find a 
prime p > 3 such that Op^Eo)^ ^ {p + 1)^ (mod I) and ap{Eo)'^ ^ ap{E)'^ (mod I). 
A priori possible values of ap{E) can be obtained by plugging all values of u,v 
(mod p) with p \ v{3u'^ — f^) into the equation for E. However, this will never 
lead to a contradiction, since plugging the values u,v with (|u|, \v\) = (2,3) into 
the equation for E, will give us elliptic curves with conductor 96. Now by reducing 
(j4]) modulo p, one obtains extra information ot\u,v (mod p) whenever one knows 
that the nonzero l-ih. powers modulo p are strictly contained in F*. This happens 
exactly when p = 1 (mod Z), say p = /cZ + 1, in which case the nonzero Z-th powers 
modulo p are given by 

Pk{Vp) :={CeFp|C' = i}. 
Heuristically speaking, the bigger k is, the more possibilities for u, v (mod p) we 
expect, hence the more a priori possibilities for ap{E) we expect, hence the less 
likely it is to conclude that ap{E)'^ ^ ap(i?o)^ (mod I). From a computational 
point of view, it is desirable to only consider the possibilities for u/w (mod p), this 
indeed suffices, since u/v (mod p) determines the reduction of E modulo p, denoted 
E{¥p), up to quadratic twist and hence determines ap{E)'^ uniquely. 

Continuing our more formal discussion, let indeed k e Z>o be such that p := 
kl + 1 is prime (so {p + 1)^ = 4 (mod I)) and suppose that ap{Eo)'^ ^ 4 (mod I). 
Then in particular p \ v{3u^ — w^) = (rs)'. Define U :~ u/{3v). From 3v = r' 
and — i;^ — 3s'^ we get — 1/(27) + {s/r^y. Since p ] rs, we obtain for the 
reduction of U modulo p, denoted U, that 

(6) U e Sk,p {« e Fp I _ J_ g ^.^i^p)}. 
For a S Sk.p consider the elliptic curve over Fp given by 

(7) E^-.Y^ = X^ + 2aX^ + —X. 
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Note that Ejj is a quadratic twist of E{¥p), so that ap{EqjY — ap{E)'^. If now for all 
a e Sk,p we have ap{EaY ^ ap(-Eo)^ (mod I), then ap{E)^ = ap(£^)^ ^ ap(i?o)^ 
(mod Z), a contradiction which implies that ([2]) has no solutions for n = I. Note 
that we have assumed pf to be irreducible; one readily obtains (see Section I3.ip 
from [M] and [H] that this is actually the case if / > 7. This proves the main 
theorem of [7]. 

Theorem 7 ([7l Theorem 1]). Let I > 7 be prime and let Eq be any elliptic curve 
over Q with conductor 96. // there exists a k € Z>o such that the following three 
conditions hold 

(1) p :— kl + 1 is prime 

(2) apiEo)^ ^ 4 (mod 

(3) ap{Ea)'^ ^ ap(i?o)^ (mod I) for all a e Su^p, 

where Sk.p and Ea are given by and ^ respectively, 

then (0j has no solutions for n = I. 

According to [7] , it has been computationally verified that for every prime / with 
7 < I < 10'' and I ^ 31 there exists a fc € Z>o satisfying the three conditions of 
Theorem [3 hence ([2]) has no solutions for n = l \il equals one of these values. 

We like to take this opportunity to point out a small omission in the proof of [7l 
Corollary 3] . This corollary to Theorem [7] states that if Z > 7 is a Sophie Germain 
prime, i.e. p := 2Z + 1 is prime, (f ) = 1 and (^) = (-l)('+i)/2, then ^ has 
no solutions for n = I. As pointed out in [7], the conditions for the Legendre 
symbols are equivalent (by quadratic reciprocity) to S2,p being empty, in which 
case condition |3] of Theorem [7] trivially holds. However, in order to use Theorem 
[7] to deduce that @ has no solutions, we need of course prove that condition [5] 
also holds. This can be done as follows. Note that both isogeny classes of elliptic 
curves over Q with conductor 96 contain an elliptic curve with rational torsion 
group of order 4. So 4|p + 1 — ap(i?o), and hence 4\ap{Eo). This implies that if 
ap{Eo) = ±2 (mod I), then \ap{Eo) =F 2| > 21. That this last inequality cannot 
hold, follows directly from the Hasse bound \ap{Eo)\ < 2^ together with I > 3, 
which completes the proof of the corollary. 

Note that the corollary and its proof are analogously to work in [12], namely 
Corollaire 3.2 and its proof. 

3. Refinements 
In this section we shall prove our main result. Theorem [TJ 

3.1. Irreducibility. As pointed out in [7], since E has at least one odd prime of 
multiplicative reduction and a rational point of order 2, the irreducibility of pf for 
primes I > 7 follows from [TJl Corollary 4.4] and [TS]. In fact, one does not need 
the first mentioned property of E, but only that E has a rational point of order 2 
to arrive at the desired conclusion, since it is well-known that the modular curves 
Xq(21) for primes I > 7 have no noncuspidal rational points. Irreducibility of pf 
for the remaining primes I > 3 can also be obtained. 

Theorem 8. Let I > 3 be prime and consider the elliptic curve E given by 0), 
where u,v d 1 with v{3u'^ - 1)2) ^ 0. Then pf is irreducible. 
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Proof. The only cases left to deal with are I — 7 and 1 = 5. 

The modular curve Xo(14) is of genus one, it has 2 noncuspidal rational points, 
which correspond to elliptic curves with j-invariant ji4 equal to —3"^ •5'^ or 3^- 5"^ -17^; 
this readily follows from [131 Chapter 5]. Denote the j-invariant of E by j{u,v). 
For both values of ji4 it is completely straightforward to check that the equation 
j(u, v) = ji4 has no solutions with m, u G Z and {Su^ — v'^)v 7^ 0. This proves that 
pf is irreducible for 1 = 7. 

Since the modular curve Xo(lO) is of genus zero and has a rational cusp (which 
is nonsingular of course), it has infinitely many noncuspidal rational points. So we 
have to work a little harder to obtain the irreducibility of pf for / = 5. Up to 
quadratic twist, the Frey curve E is 2-isogenous to 

E' -.Y^ =X^ - 6uX^ + 3{3u^ - v^)X 

(replacing X hy X + 2u, gives us back the model for E' given in Section [2]). So p§ 
is irreducible if and only if pf is irreducible. The j-invariant j'{u,v) of E' (which 
is a twist of the j-map from X{2) to -'^'(1)) is given by 



j\u,v) = 



1728(^2 + i;2)3 
1728u2(u2 - 3z;2)2 



1728. 



t|2(3u2 — 112)2 

The j-map from the modular curve Xo(5) to ^(1), denoted J5, is given by 

(t2 + lOst + 5s2)3 



(t2 + 4sf-s2)2(i2^22si+125s2) ^ 

1728. 



sH 

By comparing j — 1728, we see that every P"'^(Q) such that pf is irreducible 

gives rise to a rational point on the curve C in x give by 

^ ^ 1728u2(m2 _ 3i;2)2 ^ (^2 ^ _ ^2)2(^2 ^ 22st + 125s2) 

f2(3u2 — ^2)2 ^5^ 

Letting 

_t u{u'^ - 3i;2) st 

X '. — — , Y ' 



S' 7j(3u2 — ll2) ^2 _|_ 4g^ _ g2 

defines a covering by C of the elliptic curve over Q given by 

1728r^ = {X^ + 22X + 125)X. 

By checking that this elliptic curve has rank and torsion subgroup of order 2, 
we get that the only rational points on C are those with [s : t] = [1 : 0] or 
[s : = [0 : 1]. For these values of [s : t] we have j5{s,t) = 00, so they correspond 
to cusps on Xo{5). We conclude that pf , and hence pf , is irreducible for Z = 5. 
This completes the proof. □ 

This irreducibility result obviously leads to the following strengthening of The- 
orem [T] 



Theorem 9. Theorem^ holds true with the condition I > 7 replaced by I > 3. 
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3.1.1. ^ = 5. In order to show that ([2]) has no solutions ioi n ~ I :— 5, it suffices 
by Theorem [9] to show that there exists a. k E Z>o satisfying the three conditions 
of Theorem[71 Let k := 2, then p := kl + 1 = 11 is prime, ap{Eo)^ = 1^4 (mod I) 
and S2,p is empty because 1/27 ± 1 are not squares in Fp. So the conditions are 
satisfied for A: = 2 and we conclude that this proves Theorem [T] in case n — I — 5. 

Remark 10. By our irreducibility result, Theorem [51 the corollary mentioned at 
the end of Section [5] also holds with the condition I > 7 replaced by ^ > 3 (the 
case / = 7 is in fact trivial, because 7 is not a Sophie Germain prime). So for 
obtaining Theorem [T] in case n = ^ := 5 it sufficed to check that (^) = 1 and 
(^) = (_l)('+i)/2 forp= 11. 

3.2. Using more local information. For / := 31 there is no fc G Z>o known 
which satisfies the three conditions of Theorem [7] (it seems in fact very unlikely 
that such a k exists) , so that we cannot use this theorem to prove the nonexistence 
of solutions oi ^ ioT n — I — 31. This is not too surprising, since, loosely speaking, 
Z = 31 is very far from being a Sophie Germain prime in the sense that the smallest 
k £ Z>o such that kl + 1 is prime, which is A; = 10, is not so small compared to 
/ = 31. 

Now let ^ > 3 be prime, suppose that {x, y, z) is a solution to ^ ior n — I and let 
u, w, r, s be as in Lemma [H The idea is to factor the left-hand side of 3m^ — = 3s' 
over the ring of integers R :— Z['\/3] in order to obtain more local information on 
u,v, which, together with Lemma |6] should lead to a contradiction. We claim that 

(8) 3v = r', Viu ~ V — V3x[e and Viu + v~ \fZx\er^ 

for some nonzero xi,a;2 G i? and unit e € R* . Note that R has class number one. 
Using gcd(u,?;) — 1, 2\uv and 3|t; we readily get {^/3u — v,^/3u + v) ~ (V3) and 
\/3||\/3u ± V. From {\/3u — v){V3u + v) = 3s' the claim now follows. 

As before, let E be given by ([5|), let Eq be any elliptic curves over Q with 
conductor 96, let k € Z>o be such that p :— kl + 1 is prime and suppose that 
ap(-E'o)^ ^ 4 (mod I). Note that by Theorem |8] we get that pf is irreducible. 
Again, by LemmaHlwe get p | u(3m^ — u^) — (rs)' and we see that if we can show 
that ap^E^Y ^ cip{E)'^ (mod I), then we reach a contradiction which shows that 
([21) has no solutions for n = I. Now suppose furthermore that p splits in R. Denote 
by p any of the 2 primes of R lying above p, for any x E R denote by x the reduction 
of X modulo p in i?/p ~ and set \/3. By reducing ^ modulo p we get 

3iJ=Co, r3U-tJ = raCie, and rsu + w = r3C2e"^ 

for some Co,Ci,C2 e Mfe(IPp)- Let U := u/(iv) as before, set C,'i ■= Ci/Co,C2 — C2/C0 
and divide by ir^v = r^^Q^ to obtain 

(9) U-^ = C'{1, U+^^C',e-\ 

3r3 3r3 

By Dirichlet's unit theorem R* ~ (— l,e/) for some fundamental unit ef £ R (we 
can take for example e/ = 2 + VS). So Ci^jC2^~^ belong to the subgroup of F* 
generated by /ife(Fp) and e/, which we denote by Gk.p- liej ^ fJ'ki^p) one easily 
obtains that Gk.p = F*. Together with ^ this only gives us back the original 
information U £ Sk,p. If however ej G /ifc(Fp), then of course Gk,p = /ifc(Fp) and 
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we get 

(10) U e (Mfe(Fp) + 3^^) n iM^p) - -^). 

This might be much stronger information, because possibly (and heuristically speak- 
ing, for large k even very likely) S'^. ^ is strictly contained in Sk,p- So suppose 
Tj'^ = 1. Since ap{EY = ap{Ejj)^, we reach a contradiction if for all a S 5*^ ^ we 
have ap{EaY ^ cLp{Eo)'^ (mod I). We arrive at the following. 

Theorem 11. Let I > 3 be prime and let Eq be any elliptic curve over Q with 
conductor 96. // there exists a k Cz Z>o such that the following five conditions hold 

(1) p :— kl + 1 is prime 

(2) p splits in Z[\/3] 

(3) p|NormQ(^)/Q ((2 + V3)^ - l) 

(4) ap{Eo)^ ^ 4 (mod 

(5) ap{Eaf ^ ap{EQf (mod I) for all a £ S'^^, 

where S'f. ^ and E^ are given by and ^ respectively, 

then (0) has no solutions for n ^ I. 

Remark 12. Suppose that k e Z>o satisfies the first two conditions of Theorem 
[71 Heuristically speaking, by considering the expected size of Sk,p, it seems highly 
unlikely that if fc > ^, the last condition is satisfied. Now condition [3] of Theorem [TT] 
is very restrictive. But if fc S Z>o does satisfy the first four conditions of Theorem 
1111 then the expected size of S'j^ ^ is much smaller then that of Sk.p and it only 
becomes highly unlikely that the last condition is satisfied when k > P. This is 
of course all very rough, but the main idea about the benefits of Theorem [11] are 
hopefully clear. 

3.2.1. I = 7. Let I := 7. There are no problems with irreducibility. However, a 
large computer search did not reveal a fc S Z>o satisfying the three conditions of 
Theorem [7| or the five conditions of Theorem [11] (and we believe that it is very 
unlikely that such a fc g Z>o exists). 

Although the modular methods can give us many congruence relations for a 
hypothetical solution {x,y,z) of ([2]) with n ~ I ~ 7 , such as 2\x and 29\y, we are 
not able to show that ([2]) has no solutions for ti = ^ = 7 along these lines. Anyway, 
in [17j all finitely many nonzero coprime a, 6, c G Z satisfying + b'^ = cJ are 
determined and one readily checks that for none of the solutions — c is a square. So 
we conclude that ^ has no solutions for n = ^ = 7, as mentioned before. 

3.2.2. ; = 31. Now let I := 31, k := 718 and p ■= kl + 1 = 22259. Then one 
quickly verifies that p is a prime that splits in Z[-\/3] and that e/'^ = 1. We 
calculate ap{Eo) — ±140, so ap(i?o)^ = 8^4 (mod I). Finally, the set S'^ ^ is 
easily determined explicitly. All the elements a S S"^ ^ are given in the first column 
of Table [T] together with the corresponding values of ap{Ea)^ (mod I). 

Recall that ap{Eo)^ = 8 (mod I), so from the second column of Table [l]we see 
that ap{Ea)'^ ^ ap(i?o)^ (mod I) for all a <E S'[. p. By Theorem [TT] we can now 
conclude that ^ has no solutions for rt = / = 31. This concludes the proof of 
Theorem [T] 
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±a 


ap{EaY (mod I) 


127 


28 


1852 


19 


2818 


1 


ol40 




3615 


9 


3764 


16 


4419 


18 


5889 


25 


7994 


20 


8058 





8330 


19 


10171 


18 


10561 


5 



Table 1. elements of S'f. with corresponding values of ap{EaY (mod I) 



Remark 13. For / ~ 31 the smallest k e Z>o satisfying the five conditions of 
Theorem [TT] is k — 718. Another k G Z>o satisfying these conditions is fc = 2542, 
and it seems very likely that there are no other such k. 

4. Extra information from quadratic reciprocity 
In this section we shall prove Theorem [3] 

In [SI Section 4], quadratic reciprocity (over Q) is used to obtain that there 
are no nonzero coprime integers a, 6, c satisfying + — c" for n g Z>o with 
n = 51, 103 or 105 (mod 106). The same method can be applied to The key 
information obtained is the following. 

Lemma 14. Let I > 3 be prime, suppose that {x, y, z) is a solution to (0j for n — I 
and let r, s be as in Lemma^ Then s — r'^ is a square modulo 7. 

Proof. Let w, w be as in Lemma |31 Using (U) we get 

(11) s-r2|3(s'-r2') = 3m2-28w^ 

Suppose that q is an odd prime that divides s — r^. Then (3m)^ = 3-7(2z;)^ (mod q). 
From 3v = r' and gcd(r, s) = 1 we obtain q \ 2v, so 3 • 7 is a square modulo q, 

i.e. (^^^ £ {0: !}• By quadratic reciprocity we obtain {-^) G {0,1}- We have 

{^) = 1- However (■^) = — 1, but we claim that ord2(s— r^) is even, so that we get 

^ {Oj !}■ We claim furthermore that = I7 from which it now follows 

that s — is a square modulo 7. It remain to prove our two claims. By Theorem[8] 
and the discussion in Section [21 we know that 2\u, so 2 \ v. Suppose first that 2\\u, 
then 3(u/2)2 -7v^ = 4 (mod 8), hence ord2(s' - r^') = oTch{3u'^ - 28v'^) = 4. Next 
suppose that 4|m, then we immediately get ord2(s' — r^') — ord(3M^ — 28w^) = 2. 
So in any case, ord2(s' — r^') is even. From the fact that r,s are both odd and 
by counting terms in (s' — r^')/(s — r^), we get that the latter quantity is odd. 
We conclude that ord2(s — r^) — ord2(s' — r^') is even, which proves our first 
claim. For our second claim, note that 3|r, 3 \ s and I is odd, so it remains to 
prove that s' is a square modulo 3. From 3|i; we get 3|w^/3, so from Q we get 
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= — = (mod 3). This proves our second claim, thereby finishing the 
proof of the lemma. □ 

From Lemma ini we obtain some information on (s/r^)' modulo 7 in a straight- 
forward way. 

Lemma 15. Let I > 3 be prime, suppose that {x, y, z) is a solution to (0j for n = I 
and let r, s be as in Lemma^ Then 7 \ r and {s/r'^Y = 2 (mod 7) 

Proof. We shall use LemmajHlfor p = 7, so let u, v, E, Eq be as in that lemma. We 
calculate ar{Eo) = ±4, so 07(^0) ^ ±8 (mod I). Together with the irrcducibility 
of pf form TheoremEl we get that 7 \ vlsu^ - v^) = (rs)' and 07(^0)^ = ajiE)'^ 
(mod I). Let U := u/{3v) as before and U the reduction of U modulo 7. Then 
a7(£'o)^ = aj{Ejj)'^ (mod I), where Ea denotes the elliptic curve over F7 given by 
© for a e F7. We compute that for a 7^ ±1 we have ojiEo)^ - ariEa f e {12, 16} 
(for a = ±1 we have in fact 07(^0)^ = ai{Ea)^)- We see that if a ^ ±1, then 
ariEo)"^ ^ a-j{EaY (mod I). Together with oy^Eq)'^ = aj^E-g-)'^ (mod I) we obtain 
that 1/ = ±1. From (g]) we get that 



3^2 - ^;2 ^ 



2/ 27^2 27' 

2\l 



Reducing this modulo 7 and using U — ±1, we arrive at [s/r ) = 2 (mod 7). □ 
Combining the two lemmas above readily leads to the following. 

Theorem 16. Let I be prime with I = —1 (mod 6). Then (0) has no solutions for 
n — I. 

Proof. Suppose that {x,y,z) is a solution to ^ for n — I and let r, s be as in 
Lemma 21 From Lemma [T51 and I = —1 (mod 6), we get {s/r'^Y = {s/r^)~^ = 2 
(mod 7). This gives s/r'^ — 1 = 2^^ — 1 = 3 (mod 7). From Lemma [HI we get that 
s/r2 — 1 is a square modulo 7. However, 3 is not a square modulo 7, a contradiction 
which proves the theorem. □ 

Theorem [3] now follows by noting that if n = — 1 (mod 6), then n is divisible by 
a prime Z = — 1 (mod 6). 

Remark 17. If I = 1 (mod 6), then Lemma [T5l leads to s/r2 — 1 = 1 (mod 7), and 
since 1 is a square in F7 we do not get a contradiction together with Lemma [Til 
Furthermore, a similar relation as ([TTt is given by s + r2|3(s' + r2') = 3^2 + 26^2, 
however, similar arguments as above do not work in this case also. 

Finally, in [8] not only quadratic reciprocity over Q is applied to obtain results 
about the generalized Fermat equation + 6^ = c", but also quadratic reciprocity 
over (other) number fields. Applying similar methods in our situation is not so 
straightforward. This is because a^ + splits into linear factors in an imaginary 
quadratic number field, whose ring of integers has finite unit group, whereas v{3u^ — 
t|2) splits into linear factors in a real quadratic number field, whose ring of integers 
has infinite unit group. Note that we already dealt with this infinite unit group 
in one particular situation, namely when we solved ^ for n — 31. Trying to 
approach ^ using quadratic reciprocity over number fields might be interesting 
future research. 
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